"Read the Docs" matching MCP connectors:
GET /v1/connectors — MCP directory API referenceMatching Connector Tools:
Incident-reporting deadlines from the law: CRA, NIS2, DORA, GDPR, HIPAA, SEC 8-K. 6 of 9 tools free.
DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
Smart contract security screening for Base. Check any contract or token for risk before interacting with it: Solidity source verification, upgradeable proxies and admin or mint powers, holder concentration, dangerous selectors, and B20 issuer powers. It surfaces the usual rug pull and scam indicators. The free tool needs no wallet and no API key; the paid Flash Audit (3.49 USDC over x402) returns a report with an anchored SHA-256. Payment is the only gate.
The miniOrange MCP Server Plugin is a secure WordPress MCP Server that exposes your WordPress site as an MCP endpoint while adding enterprise-grade security, policy enforcement, and complete audit logging. Unlike a basic MCP server that simply connects AI tools to WordPress, this plugin verifies every AI request before it reaches your website. Every request is authenticated, checked against security policies, logged, and can even require human approval before execution.
Verifies which domain officially belongs to a software product, AI tool, or company, so the agent stops handing users lookalike download sites. Ownership only, never safety. Every verdict is backed by reproducible evidence. Tools: get_official_url(name), verify_url(url). No auth required.
Domain security reconnaissance tools for AI agents via Model Context Protocol. 13 security tools — DNS, SSL, HTTP headers, email auth, port scan, propagation, reverse DNS, ASN/BGP, RDAP/WHOIS, subnet calc, and comprehensive security scan — callable from Claude Desktop and any MCP-compatible AI agent. Part of DechoNet. Every tool here is also a free web tool at dechonet.com — no sign-up, no API key — backed by error-fix guides. This package brings the same checks to AI agents.
Smart contract security screening for Base. Check any contract or token for risk before interacting with it: Solidity source verification, upgradeable proxies and admin or mint powers, holder concentration, dangerous selectors, and B20 issuer powers. It surfaces the usual rug pull and scam indicators. The free tool needs no wallet and no API key; the paid Flash Audit (3.49 USDC over x402) returns a report with an anchored SHA-256. Payment is the only gate.
Fallax is a phishing simulation and security awareness training platform. Read your results.
Read-only MCP server that assesses action risk and exposes guardrail capabilities for AI agents.
Is this person indexed on that data-broker domain? A three-state verdict, with the evidence.
Read-only breach intel, full history 2007-today: reports THAT an org was breached, never the data.
Hosted, OAuth-gated endpoint for quantakrypto's post-quantum crypto tools: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH) and get NIST ML-KEM/ML-DSA/SLH-DSA migration guidance over authenticated HTTP — nothing to install. Sign-in required (Google/GitHub/email). Same tools as the open-source @quantakrypto/mcp server; source at github.com/quantakrypto/pqc-tools.
Read-only MCP server for turva.dev, an agent-readiness audit and advisory service.
The PropelAuth Integration MCP Server helps you and your favorite AI agent integrate PropelAuth as quickly and easily as possible into your project. Whether you're integrating PropelAuth into your Next.js project or your FastAPI backend, the Integration MCP Server will ensure your AI agent has the best context possible for a successful integration.
AI-operated. Two free DKIM readers, no signup: reads keys, finds the selector. Paid roster $99.
Free, no-account verification of KeyHalve-sealed documents. Read-only; never receives keys.
Read-only EU counterparty sanctions preflight over MCP: screen names & identifiers, evidence
IOCs (URLs, domains, IPs, hashes) shared by the infosec community on X/Twitter. No auth, CC0.
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} free no key
Every NIST FIPS 140 certificate, plus the modules-in-process queue NIST publishes only as a page.
